EP3114817A1

EP3114817A1 - Method and system for downloading data to at least one computer

Info

Publication number: EP3114817A1
Application number: EP15713209.3A
Authority: EP
Inventors: Pierre SCHMIDT; Thierry Lopez
Original assignee: Peugeot Citroen Automobiles SA
Current assignee: PSA Automobiles SA
Priority date: 2014-03-07
Filing date: 2015-02-27
Publication date: 2017-01-11
Anticipated expiration: 2035-02-27
Also published as: FR3018412A1; FR3018412B1; CN106063230B; CN106063230A; WO2015136181A1; EP3114817B1

Abstract

The invention relates to a method for downloading data to at least one motor vehicle computer comprising a first transceiver connected to a first network, characterized in that, said computer additionally comprising a second transceiver connected to a second network, the method further comprises the following steps: - reception (31, 31') of a download request by way of the first network; activation (34) of the second transceiver by the computer; downloading (35) of the data to the computer by way of the second network; deactivation (37) of the second transceiver by the computer.

Description

METHOD AND SYSTEM FOR DOWNLOADING DATA TO AT LEAST ONE CALCULATOR

The invention relates to a method and a system for downloading at least one file into one or more computers.

In the remainder of this description, when the file to be downloaded contains instructions or the executable code of a software, it is also referred to as downloading a software.

The increasing complexity of the onboard electronic function leads to a multiplication of electronic boxes (or computers) mounted on motor vehicles. In order to limit the resulting diversity, it was decided to download these calculators into the vehicle production workflow. The operation is carried out by means of a dismounted tool which connects to the diagnosis socket of the vehicle and makes it possible to program in the memory of the calculator (s) the software which ensures a compliant operation of the produced vehicle taking into account the characteristics (motorization, options) specific to this vehicle. The communication between the production tool and the calculator (s) makes use of the CAN 500kbps technology making it possible to transfer the data to be programmed.

Methods and systems for downloading files in on-board computers on board motor vehicles, such as those described for example in document FR-A-2719924, are already known in the state of the art. This document details the various successive steps of the procedure used during the assembly of the vehicles or in the after-sales network of a manufacturer, during the correction of a service by file exchange.

This download function has subsequently been optimized in order to make it compatible with requirements of the vehicle manufacturing flow, in which the downloading of a set of computers of the same vehicle is carried out simultaneously. For example, reference can be made to document FR-A-2825813 which describes this optimization. However, the reception of new embedded features and ever more complex regulations is pushing on-board memory sizes and download time requirements for these increasingly large memories.

This increase in data volume is constantly increasing which makes the download incompatible with the time allotted for performing this operation in the workflow. The download time can not be extended without a major reorganization of the production plants.

There is therefore a need for calculators and system for making downloads in the time allotted for carrying out this operation in the main flow of an assembly plant.

However, it is necessary to maintain compatibility with current systems.

In particular, it is desirable that the downloadable computers quickly can be deployed on older vehicles.

In addition it would be desirable that downloadable calculators quickly can be downloaded also in after-sales service with existing calculators. Indeed, the after-sales network of a manufacturer has a tool sold in several thousand garage and is a non-replaceable investment overnight. In addition, downloading in after-sales service is not subject to the same constraints as those arising from manufacturing. Indeed, the number of downloads made per day in a dealership is not comparable to that of a manufacturing unit. In addition, the time allowed for downloading in a dealership can be greater without this posing an insurmountable constraint.

The object of the invention is therefore to solve these problems and to propose a solution for downloading, in computers, at least one file in a time compatible with the workflow of a factory, while maintaining compatibility with existing systems. It proposes more specifically for this purpose a method for downloading data to at least one motor vehicle calculator comprising a first transceiver connected to a first network, characterized in that, the computer further comprising a second transceiver connected to a second network, the method further comprises steps of:

Receiving a download request through the first network,

Activation, by the computer, of the second transceiver,

Download data to the calculator via the second network,

Deactivation by the computer of the second transceiver.

The activation of a transceiver (in particular of the Flexray type) makes it possible to download the data more quickly to the computer.

In addition, this solution ensures compatibility of the download by the CAN network when this computer is mounted on a vehicle with a CAN architecture.

Thus a computer implementing the invention can be mounted both on a vehicle where the second network (Flexray) is present, as on a vehicle having only the first network (CAN l / S). This dual compatibility allows an after-sales tool to continue to download by the first network (CAN) a computer with two network interfaces (CAN and Flexray).

According to a characteristic of the invention, the computer further comprising a memory in which an application software and a boot loader are stored, the method for downloading further includes a step of verifying the integrity of the data downloaded and if the downloaded data are intact, the execution by the computer of the application software otherwise the execution by the computer of the boot loader.

According to another characteristic of the invention, the method comprises in besides steps of:

Opening a diagnostic session before the download step,

Opening a default session after the download step.

According to another characteristic of the invention, the method further comprises a step of launching a service allowing modification of the characteristics of the communication of the computer to increase the bandwidth during the download.

According to another characteristic of the invention, the method further comprises a step of executing the boot loader before the activation step, of the second transceiver.

The invention also relates to a motor vehicle calculator comprising a first transceiver connected to a first network and means for receiving a download request via the first network, characterized in that it further comprises: a second transceiver connected to a second network, means for activating and deactivating the second transceiver, means for implementing the downloading method according to the invention.

According to a characteristic of the invention, the vehicle computer further comprises a first and a second transceiver, the first transceiver being connected to the first network and the second transceiver being connected to the second network.

The invention also relates to a motor vehicle characterized in that it comprises at least one computer according to the invention and a connector comprising a plurality of pins, a first set of pins being connected to the first network and a second set of pins being connected. to the second network. The invention also relates to a system for downloading data comprising a download tool, characterized in that it further comprises a computer according to the invention and a gateway connecting the download tool to the computer, the download tool also being connected to the computer via the first network, the gateway being connected to the computer via the second network.

The invention also relates to a system for downloading data in which the first network is a CAN bus and the second network is a Flexray bus.

Other features and advantages of the invention will appear on examining the detailed description below, and the attached drawings, in which:

FIG. 1 represents a system for downloading at least one file to one or more computers;

FIG. 2 represents a logic diagram illustrating the method of downloading data from the tool to the first computer via the first network;

FIG. 3 represents a logic diagram illustrating the method of downloading data from the tool to the first computer via the second network.

The attached drawings may not only serve to complete the invention, but also contribute to its definition, if any.

Figure 1 shows a system for downloading at least one file to one or more computers.

For example, the file is a file containing the executable code of a software. This executable code contains instructions executable by the computers in which this file is downloaded.

The downloading system 10 according to the invention comprises:

a download tool 1 1, for example of the personal computer type (or PC for Personal Computer),

one or more computers 13.1, 13.2, 13.3 integrated in a vehicle 14 or available "on the table".

a gateway 12 (landed) connecting the tool 1 1 and at least one calculator 13.1, 13.2.

Each of the computers is connected to a first network R1. At least one computer is further connected to a second network R2.

The first network R1 (for example an asynchronous communication network) is a (communication) network responsible for transmitting first T1 frames having a first format and having a first bit rate.

The second network R2 (for example an asynchronous communication network) is a (communication) network responsible for transmitting second frames T2 having a second format and having a second bit rate.

According to a characteristic of the invention the second rate is strictly greater than the first rate of the first network R1.

In what follows, it is considered as a nonlimiting example that the first network R1 is of the type CAN (Controller Area Network) and the second network R2 is of type FlexRay (so-called deterministic network (or "time- triggered ")). But, the invention is not limited to these two types of communication network. It concerns indeed any combination of asynchronous communication networks of different types and having different rates.

Furthermore, it is considered in the following, by way of non-limiting example, that the first (R1) and second network (R2) are embedded in a motor vehicle. But the invention is not limited to this type of system. It concerns indeed any type of system, including aircraft.

The first network R1 conventionally comprises equipment S1 i (i = 1 to N, N> 2) which are connected in parallel to a multiplexed bus. In the case of a CAN-type network, it constitutes a broadcasting network of (first) T1 frames. It is recalled that in a CAN-type network the access of a device (S1 i) to the multiplexed bus is done according to the so-called CSMA / CR mode, each device (S1 i) having to listen to the traffic on the bus multiplexed before speaking, and a mechanism being provided for solving the collisions between frame transmission requests (T1 v) according to predefined priorities.

The second network R2 conventionally comprises equipment S2j (j = 1 to M, M> 2) which are connected in parallel to a multiplexed bus. It is recalled that in a FlexRay type network the access of the equipment (S2j) to the multiplexed bus is done according to the TDMA mode (time division multiplexing), each device (S2j) having during each cycle at least one slot allocated time, during which it is allowed to transmit data (possibly in a (second) frame T2).

The computers in which the file or files must be downloaded are computers intended to be mounted in a vehicle such as a motor vehicle. Here, the motor vehicle is a car.

For example, these computers can be engine control computers, gearbox computers, ABS (Antiblock Breaking System) computers, suspensions calculators or cabin computers.

To simplify FIG. 1, only three computers 13.1 to 13.3 are represented. For example, the computers 13.1 to 13.3 are respectively an engine control computer, a cabin calculator and an ABS computer.

These calculators have common features described below.

Each of the computers comprises a rewritable non-volatile memory. For example, this memory is a NVRAM (Non Volatile Random Access Memory). By way of illustration, this is a memory known in the terminology of "flash memory" or "flash Eprom". This memory contains files. These files may contain instructions executable by the calculator. Here, it is instructions to control the engine of a vehicle in the case of the engine ECU. It is this executable file (also called application) that corresponds to the software that can be reprogrammed in the assembly plant or after-sales service.

The calculator memory also includes a boot loader (or bootloader according to the English expression). The boot loader is software that initializes the calculator and contains all or part of the download process.

Each of the computers also comprises several transceivers (or transceiver according to the English expression) for connecting this computer to different equipment of the vehicle in which it is intended to be mounted. In particular, one of these transceivers is intended to be connected to the first network R1.

In the example, it is assumed that the computers 13.1 and 13.2 each further comprise a second transceiver connected to the second network R2 while the computer 13.3 is devoid of it.

The second transceiver is activatable and deactivatable. In its activity state, the second transceiver allows the computer to send and receive data via the second network R2. In its deactivated state, the second transceiver is no longer able to exchange data on the second network R2.

This makes it possible to limit the power consumption and the electromagnetic emissions related to a technology intervening only during the reprogramming operation at the factory, the Flexray component (transceiver) is deactivated outside this phase.

Advantageously, the vehicle further comprises a connector 15 having a plurality of pins. A first set of pins is connected to the first network R1 and a second set of pins to the second network R2.

The download tool 1 1 comprises a programmable computer capable of executing instructions stored in a memory. For this purpose, the computer is connected to the memory containing instructions for executing the downloading method according to the invention.

The download tool 1 1 is connected to an input / output port of the gateway 12 via an Ethernet link because it can supply the Flexray network with a high rate (10Mbps or megabits per second). In addition, this technology is justified through the nature of the tool that is a PC mechanically reinforced and has an Ethernet port as standard avoiding the integration of an additional communication card.

The download tool 1 1 is connected to an input / output port of the vehicle via a CAN link through the connector 15. The CAN network allows, on the one hand, (i) the updating of the computers does not not having the Flexray for downloading and, secondly, (ii) the implementation of the Flexray interface linked to the computers to be reprogrammed via this technology.

The gateway 12 enables the downloading tool 11 to transmit frames of information to the computers 13.1, 13.2 and to receive, in response, frames of information sent by each of these computers 13.1, 13.2 to the tool. 1 1.

In this context, the download tool 1 1 transmits the data to download via the Ethernet link. The gateway 12 makes it possible to convert the Ethernet frames into Flexray frames for the computer or computers to be updated. Conversely, the responses of the computers are received by the gateway 12 and then returned to the tool 1 1 once converted into Ethernet frames.

FIG. 2 represents a logic diagram illustrating the method of downloading data from the tool 11 to the first computer 13.1 via the first network R1.

When the files are downloaded to an after-sales service, the download is not subject to time constraints. It is not necessary to use the second network R2 (Flexray). The entire downloading procedure is therefore performed by tool-calculator exchanges transmitted via the first network R1 (CAN).

Step 21 corresponds to the reception, by the first computer 13.1 when it executes its application software, of a request having the effect of initiating the scenario of download of the computer. This scenario takes place by changing the current operating mode (also called session) of the computer that passes in a so-called "reprogramming" session (step 22). It follows a switch from the application software to the bootloader. It then becomes possible to reprogram the first computer 13.1 by transmitting the tool-calculator requests for unwinding the download and reprogramming procedure represented by step 23.

Step 24 is executed following the receipt of a request (DSC 01) confirmation of the end of the download and reprogramming. Step 24 allows the download result to:

1) return the computer to session by default,

2) trigger a complete reset of the computer (or RESET).

Step 25 allows each (restart) of the computer to check the integrity of the software "client" (application) and in case of a favorable outcome of switching from the bootloader to the newly downloaded application. Otherwise the computer remains in the bootloader.

Without valid application software, the computer is maintained in the bootloader (step 25). However, it must be possible to download an application.

Step 21 'corresponds to the reception, by the first computer 13.1 when it executes its bootloader, of a request having the effect of initiating the simulation of the download of the computer.

The start of the downloading from the bootloader takes place as for the application, following the receipt of the request for download request by the CAN.

The opening of the reprogramming session (step 22 ') is then performed directly from the bootloader.

FIG. 3 represents a logic diagram illustrating the method of downloading data from the tool 11 to the first computer 13.1 via the second network R2.

When files are downloaded to a factory, the download operation uses the second network (Flexray) to allow the reprogramming of the on-board computers within the allotted time.

In order to limit the power consumption and electromagnetic emissions associated with a technology occurring only during the reprogramming operation at the factory, the second transceiver (Flexray transceiver) is deactivated outside this phase.

The first network R1 (CAN) is then used as a means for turning on the second transceiver in order to make it operational during the reprogramming step of the computer.

The mechanism for setting the situation and then downloading via the Flexray network comprises the steps: 31/31 ', 32/32', 33/33 ', 34, 35, 36, 37 and 38. The steps 31/31', 32/32 'and 33/33' ensure the awakening of the Flexray component that can not yet receive commands, and are therefore to be transmitted by the CAN network.

Step 31 corresponds to the reception by the computer 13.1 of the request requesting the opening of an extended diagnostic session, when it executes its application software.

Opening 32 of the extended diagnostic session makes it possible to authorize the reception of requests associated with the so-called "Link Control" service (step 33). This service makes it possible to modify the characteristics of the communication between tool and computer in order to increase the bandwidth (throughput) to respond to use cases such as, for example, download.

"Link Control" therefore responds well to the problem of starting the Flexray network via an alternative technology (CAN). Step 33 also performs a switchover in the bootloader, with as a point of entry a function for switching on the Flexray transceiver (34). After step 34, it becomes possible for the download tool 1 1, to communicate with the computer 13.1 via Flexray technology which allows a higher speed than the traditional CAN network and thus allows the respect of the constraint of the time allotted to the reprogramming operation.

At the identical of 22 ', step 34bis makes it possible to switch to "reprogramming session" which makes it possible to download the calculator in transmitting the tool-calculator requests by the Flexray network (step 35). It should be noted that the use of Flexray technology does not change the reprogramming procedure (35) whose operation is independent of the media (CAN or Flexray) used.

Step 36 is executed consecutively upon receipt of the request

(DSC 01) confirmation of end of download and allows the end of the download to 1) return the calculator session by default, 2) trigger a RESET resulting in the complete reset of the computer an execution of step 37 causing the turning off the Flexray component. Step 38 makes it possible to check the integrity of the software "client" (application) and in the event of a favorable outcome of switching from the bootloader to the newly downloaded application.

Thus, it is understood by the implementation of this mechanism that the CAN / Flexray dual compatibility is thus well preserved, thus allowing a manufacturer's APV network to continue to download on new vehicles equipped with a Flexray computer while retaining / extending its current toolset.

Claims

1. Method for downloading data to at least one automotive computer (13.1) having a first transceiver connected to a first network (R1), characterized in that the computer (13.1) further comprising a second connected transceiver in a second network (R2), the method further comprises steps of:

- Reception (31, 31 ') of a download request via the first network (R1),

- Activation (34), by the computer (13.1), of the second transceiver,

- Downloading (35) the data to the computer (13.1) via the second network (R2),

- Disabling (37), by the computer (13.1), the second transceiver.

2. Method for downloading according to claim 1, characterized in that the computer (13.1) further comprising a memory in which are stored an application software and a boot loader, the method further comprises a verification step ( 38) of the integrity of the downloaded data and if the downloaded data are intact, the execution by the computer of the application software otherwise the execution by the computer of the boot loader.

3. Method for downloading according to one of the preceding claims, characterized in that it further comprises steps of:

- Opening a diagnostic session (32, 32 ') before the downloading step (35),

- Opening a default session (36) after the download step (35).

4. Method for downloading according to one of the claims preceding, characterized in that it further comprises a step of launching a service (33, 33 ') allowing the modification of the characteristics of the communication of the computer (13.1) to increase the bandwidth during download.

5. Method for downloading according to one of claims 2 to 4, characterized in that it further comprises a step of executing the boot loader before the activation step (34) of the second transceiver.

Motor vehicle calculator (13.1) comprising a first transceiver connected to a first network (R1) and means for receiving a download request via the first network (R1), characterized in that it further comprises: a second transceiver connected to a second network (R2), means for activating and deactivating the second transceiver,

said computer being able to download data via the second network (R2).

7. Motor vehicle (14) characterized in that it comprises at least one computer (13.1) according to the preceding claim and a connector (15) having a plurality of pins, a first set of pins being connected to the first network (R1). and a second set of pins being connected to the second array (R2).

8. System for downloading data comprising a download tool (1 1), characterized in that it further comprises a computer (13.1) according to claim 6 and a gateway (12) connecting the download tool (1). 1) to the computer (13.1), the downloading tool (1 1) being also connected to the computer (13.1) via the first network (R1), the gateway (12) being connected to the computer (13.1) by the intermediary second network (R2).

9. System for downloading data according to the preceding claim, wherein the first network is a CAN bus and the second network a Flexray bus.